Click here to load reader

· Web view江山市教育技术中心. 数据中心机房安全保障. 采购项目. 项目编号:JSS2018D009Q. 公. 开. 招. 标. 文. 件. 委托单位:江山市教育

Embed Size (px)

Citation preview

JSS2018D009Q

3

5

5

6

7

7

9

9

9

10

10

10

11

11

12

13

45

45

45

45

47

50

50

51

61

64

1

1

JSS2018D009Q

1

1

260

2 :

1.

2.

3.

4. (www.creditchina.gov.cn)(www.ccgp.gov.cn)

3

www.zjzfcg.gov.cnwww.jsztb.org

4

20183130900

1.

2. 20183130900

5

25000 [email protected]

3922628784630570-4962111

201839235959

6

1. [200928]

2. 0570-4033197

5

3. [2011]1816%[2017]1416%

7

13567011466

0570-4031937

9

2018212

4 64

http://www.jsztb.org/

2

1

1.

2.

3.

260

4.

5.

90

6.

[email protected]

3922628784630570-4962111201839235959

7.

8.

201831309:00:00

9.

10.

201831309:00:00

11.

7

12.

13.

5

14.

10%

15.

7

16.

2

1.

2.

2.1

2.2

2.3

2.4

2.5

2.6

3.

4.

5.

6.

7.

,

8.

8.1

8.2

8.3

8.4

8.5 ,,49

9. [2011]1816%

[2011]300

3

10.

10.1

10.2

10.3

10.4

10.5

10.6

11.

11.1 1510315

4

12.

12.1

12.2

12.3

13.

13.1

13.1.1

13.1.2

13.1.3

13.1.4

13.1.5

13.1.6

13.1.7 CC

13.1.8

13.1.9

13.1.10

13.2

13.2.1

13.2.2

13.2.3 49

13.2.4

13.2.5

13.2.6

13.2.7

13.2.8

13.2.9

13.3

13.3.1

13.3.2

14.

14.1

14.2

14.3

14.4

14.5

14.6

14.7

14.8

15.

15.1

15.2

15.3

16.

16.1 90

5

17.

6

18.

19.

20.

21.

22.

23.

23.1

23.2

7

24.

25.

25.1

25.2

25.3

25.4

25.5

8

26.

26.1

26.2

26.3

26.4 ;

26.5

26.6

26.7

26.8

26.9

26.10

26.11

9

27.

27.1

27.2

27.3

10

28.

28.1

28.2

29.

29.1 ,

29.2 ,

30.

30.1 ,,,

30.2 :

31.

31.1 31.,

31.2 ,

32.

33.

33.1 ,

33.2 ,

11

34.

34.1

34.2 10%

34.3 ,

34.4

34.5

34.6

12

35. ,,,,,,,,;,:

35.1 ;

35.2 ;

35.3 ;

35.4 ;

35.5 ,;

35.6

13

36.

6 64

http://www.jsztb.org/

3

1

2:

3

1. (GB_T 22240-2008)

2. (GB_T 22239-2008)

3. GB/T 28448-2012

4. GB/T 28449-2012

5. YDT3169-2016

6. 2015

7. 33

8. 82

9.

10.

75IP

ACL

1

4,22FW/IPS

2

2

442220000

1

3

Web

42BYPASS)4210GE21Tb6GbpsHTTP35448

1

web

4

6GE32G4*4T

1

5

41T300600

1

6

41TSyslogSNMP TrapOPSecFTP

1

7

WebABC50IP610/100/1000M2SFP

1

8

,200G/1000/1000/

1

9

VPN

64,SSL500Mbps3800400/150SSL VPN

1

10

200

1

11

(5)(2)2CISP

1

12

36010

1

internet

13

332

1

22610/100/1000BASE-T

20Gbps10Gbps350

802.1Q VLAN TrunkaccessVLAN

0x81000x9100VLAN Tag QINQ

LACP

6

//

IPIP/MACIP/MAC

DNSDNS Docting DNS Doctoring

VPN

L2TPPPTPGREIPSECSSLVPN

RIPv1/v2OSPFv2/v3BGP

IPv6

/IP/

IPIP

IP/

IP

4000

NATIPV6URL

2100

IPv4v6 NATIPIPIP

DDOSCCIPSYNACK

IPSec VPNSSL VPNGREGRE over OSPFGRE over IPSecVPN

VPN

150

URLURLGETPOSTHTTPS

SMTPPOP3IMAP

DoS/DDoS

LandSmurfFraggleWinNukePing of DeathTear DropIP SpoofingSYN FloodIPv4IPv6 ICMP FloodUDP FloodDNS FloodARP FloodIPARPIPTCP

NTPNTPNTP

DOS/DDOS/

IPIPIPDoS

IPICMPTCPUDPDNSHTTPNTP

UDPUDPUDPUDPTCPTCP

ICMPUPDSYNDNS FloodDDoS

8000

HTTPFTPSSHSMTPIMAPPOP3 RDPRloginSMBTelneWeblogicVNCMySQLOracleMSSQL

SSHFTPRDPVNCNetbiosMySQLOracleMSSQL

IP

0day/1day

/---

WEBcpu

/

IPmacURL

A/SA/A

IP URL

6Gb

7,000,000

20000

4422

1TB

BYPASS

--

VMvare

IPv6

IPv6IPv6

web/CPU/

IPsec VPN

IPSec VPNIPSec VPNIPsec VPN

1.

2.VPN

3.

Web

1.web

2.

3.web

1.

2.IP

3.1PC2PC

AP

1.WPA-PSK/WPA2-PSKWPA/WPA2()

2.

3.Dos

4.

5.

SSID

SSID

1. 6

2.

3.

60002500900

QQ

QQ

SSL

SSLweb

SSL

SSLweb

1QQMSNIM

2APPIOSandroid

3Wind

P2P

P2PP2P

IPIPIP

Wan-lan

IPIP

DCDC

////

/

OFFICE

EAL3

IPv6 Ready Phase-2

Web

2U1+1

2*GE4*GE4*SFP210GE

6000Mbps

HTTP350000

HTTP(CPS)30000

IPTCPTCP

IPTCP

IPWAF

VLANVLAN

-BYPASSBYPASS

IP

ipv4/ipv6

WEB

WEBVLAN

(XSS)SQL Cookie

WebshellWeshell

WEB

CookieCookieCookieCookie Httponly

URL

IP

WAF

WAF

URL

IP

WEB

ISCCC

CC

URLIP

URLURL

IPIP+URLIPX_Forwarded-For

WAF302jsCC

ISCCC

IP

IP

IP IP

,

HTTPURLUserAgentPOSTcookie

PCI-DSS

WORD,PDF

Syslog

URLIP

SSL

HTTPSWEBHTTPSHTTPS

SSLIPIP

WEB

WAFWeb

HTTPS

WAF

LDAP

614USB16TB

IPPC

/

,

Web

webweb

web

11003000

IT

209000+

HTTPFTPSSHSMTPIMAPMySQLOracleMSSQL

WEB

WEBSQLXSS

CSRF

ASP,PHP,JSPwebshell

Web

WebWeb3000

40CNCERTVIRUSTOTAL

DNS

DNSFlowDNS

Webshell

HttpFlowwebshell

/

DoS

NetFlowUEBADoSIP

IPIP

/TOP10

/

PDF

htmlIT

TB;

/IPIDURL

syslog

/IP

7*242()

61484

,IPTCP, URL,,URL ,(IP)

11003000URL4000CVE

,,,,IPARPIPTCP;

ICMPUPDSYNDNS FloodDDoS

HTTPFTPSSHSMTPIMAPMySQLOracleMSSQL

Web

HTTP 1.0/1.1HTTPS

B/SSQLXSSCSRFASP,PHP,JSPwebshellWeb

WebWeb3000

Web

40

IPIP

TCPWebSQLDNSLDAP

5

CPU

MTBF6

1U610/100/100011,111Console,114CPU()

B/SHTTPS

1TBSOC

50

300

600

cpuWEB

WEB

telnetsshCLI

FTPSFTP

WindowsRDPUnixXwindow

clientODBCJDBC

WebWebJDK

RDPVNCX11SSHTELNETFTP

SSHTelnetx11FTP/SFTP

IPIP

RDPVNCX11SyslogIPIP

RDPRDP

/

USBKEY

SSO

Google,

C/S,

webC/S

IP

IBM AIXOS400Hewlett-PackardHP-UX SunSolaris CompaqTru64 UnixRedhat LinuxTurbo LinuxBluepointXtermLinuxSlackwareFreeBSDNetBSDSCO UnixWinNTWin2000WinXPWin98WinMeNovellNetware5

IT

1TBSOC

1U610/100/1000MBase-T(RJ45)151ConsoleConsole50

10000EPS3000EPS5000EPS

syslogsnmp trapnetflowjdbcodbcwindowsEVTagent

50,5,,, ()

syslog()

IP

IPIP

/IP

50ip

/NIDS/

USB key

HTTPS

3C

62SFP1CONSOLE

1U

WEBIP

B/SC/S

Web

Windows

LinuxUnix

CiscoJuniper

CGI

IPIPIP

IP

Web

OracleMySQLSQLserverSQL

XSS

ApacheTomcatIIS

WebCPU

URLURLID

WebIPCVE ID

WebSNMPv1SNMPv2SNMPv3Syslog

WebPDF\WORD\EXECL\HTML

WebWebWebWeb

SSLWebSSLConsoleWebshell

pingtcpdumpifconfigurl

200G/1000/1000/

B/SWeb

SSL

USB-Key

,

/

VARCHARVARCHAR2CHARNUMBERDATECLOBBLOBIMAGE

13003003020101030CAD300

OracleMysqlSQLserverDb2Informix

RedisHBaseMongoDB

OA

SharePointExchange Server IBMLotus Domino/NotesCoreMail

httphttpssmtpimapftpTCP

RDSOTSOCSOSS

PDFTIFFJPGBMPOFD

60+

PDFWordCSV

VPN